{ "cveId": "CVE-2026-23242", "url": "https://patchblox.com/security/cve/CVE-2026-23242", "summary": "CVE-2026-23242 is fixed in 15 products on 1 platform, first by DEBIAN-CVE-2026-23242, released March 18, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "RDMA/siw: Fix potential NULL pointer dereference in header processing", "description": "In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siw_get_hdr() returns -EINVAL before set_rx_fpdu_context(), qp-\u003Erx_fpdu can be NULL. The error path in siw_tcp_rx_data() dereferences qp-\u003Erx_fpdu-\u003Emore_ddp_segs without checking, which may lead to a NULL pointer deref. Only check more_ddp_segs when rx_fpdu is present. KASAN splat: [ 101.384271] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 101.385869] RIP: 0010:siw_tcp_rx_data\u002B0x13ad/0x1e50", "published": "2026-03-18T11:16:15Z", "severity": "Moderate", "cvss": 7.5, "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "epss": 0.00628, "epssPercentile": 0.50358, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23242", "fixes": [ { "platform": "linux", "product": "dtb-aarch64", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-azure", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-default", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.27.1.160000.2.8", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-docs", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7-RT_Update_11", "release": "sles 15.7", "fixedVersion": "1-150700.1.3.1", "fix": "SUSE-SU-2026:1573-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1573-1", "released": "2026-04-23T15:52:40Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-rt", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-source", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-syms", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.28.1", "fix": "OPENSUSE-SU-2026:20572-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1", "released": "2026-04-20T17:16:35Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.170-1", "fix": "DEBIAN-CVE-2026-23242", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23242", "released": "2026-03-18T11:16:15Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.12.85-1", "fix": "DEBIAN-CVE-2026-23242", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23242", "released": "2026-03-18T11:16:15Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.18.14-1", "fix": "DEBIAN-CVE-2026-23242", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23242", "released": "2026-03-18T11:16:15Z" } ], "noFixYet": [], "dataAsOf": "2026-11-09T07:25:28Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }